Questions tagged [man-in-the-middle]

A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to each other via the attacker in the middle.

Filter by
Sorted by
Tagged with
0 votes
0 answers
27 views

In TLS, how are the Diffie-Hellman exchange parameters protected from a MITM attack? [duplicate]

Authentication alone will not stop a MITHM from intercepting and modifying plaintext exchanges, since he can let the authentication occur, then begin modifying the exchange data and neither end will ...
Michael's user avatar
  • 23
0 votes
1 answer
87 views

Can a VPN company perform a MiTM attack if SSL Pinning is in place?

Recently, I read news about Facebook acquired the Onavo VPN company to monitor Snapchat users' traffic. It seems they executed a Man-in-the-Middle attack by replacing the certificate. But could they ...
Robert Zunr's user avatar
1 vote
2 answers
49 views

Preventing Data Tampering in HTTPS Requests: Safeguarding User-Initiated Donations

Could a Man-in-the-Middle (MITM) attack compromise the integrity of user-initiated transactions over HTTPS? Specifically, if a user selects an amount to donate on a website, is it possible for a ...
user23570085's user avatar
0 votes
2 answers
84 views

How to Capture Mobile API Requests in burp when Server side pinning is implemented

I recently encountered a scenario where Mobile Application is generating CSR request, call a POST API request and in response, Ask Server for certificate. Server will respond with the temporary ...
Tejas Pandya's user avatar
0 votes
2 answers
91 views

Is a MITM attack possible for my apt repo?

OS is Debian. Imagine I have my own apt repo set up inside a private network. This repo is set up to provide a single package to other servers on this network. I can easily create a signing key for my ...
cat pants's user avatar
  • 101
0 votes
1 answer
89 views

Fake access-point + custom DNS-server to intercept mobile app credentials? [duplicate]

Would it be possible to create a fake twin access-point for a router with a custom DNS-configuration in a way to fool mobile apps like for example Instagram to send authentication requests to my own ...
O'Niel's user avatar
  • 2,914
4 votes
2 answers
619 views

securely tunneling through a MITM proxy

I am wondering if there is a practical way to establish a secure, encrypted network connection through an MITM proxy given the ability to communicate secrets out-of-band with a second, external proxy. ...
Aryeh Leib Taurog's user avatar
0 votes
0 answers
51 views

Decrypt TLS (DHE cypher) inside of TDS (Microsoft SQL Tabular Data Stream protocol)

Is there a possibility to decrypt TLS data encapsulated within TDS Microsoft TSQL protocol? The TLS handshake seems to occur within TDS data, right after the TDS pre-login The handshake itself is ...
mouch's user avatar
  • 113
0 votes
1 answer
111 views

It is possible to receive ntlm response with ipv6. What about ipv4?

I performed ntlm relay attack with mitm6 and ntlmrelayx. I used mitm6 for dns spoofing. When the victim sent a query containing where the DHCP is located, I identified myself as the DHCP server. Then ...
Firat's user avatar
  • 13
2 votes
0 answers
95 views

Does DNSSEC prevent man-in-the-middle at all? [duplicate]

I just watched a video on DNS that explained that if there is a man-in-the-middle or if someone has taken over your resolver, DNSSEC can prevent the responses from being tampered with because the ...
Nasso's user avatar
  • 23
0 votes
1 answer
296 views

Why can't we encrypt twice instead of having Cloudflare MITM half the internet?

First of all I want to address a thought I had which is that they might market their ability to read the encrypted code being sent so they can spot "bots" and such, and that this is why they ...
Henrik F's user avatar
0 votes
3 answers
183 views

Does TLS interception necessarily require a self-signed certificate? Please explain why

A brief schema of a TLS intercepting proxy - the Client connects to the Host via the Proxy in a way which allows the Proxy to perform a (consensual) MITM. [Client] -> [Proxy] -> [Host] It's ...
bbozo's user avatar
  • 511
0 votes
0 answers
104 views

Intercepting Android App: Google detects burp proxy and block the request to app

I was recently doing bug bounty on a website and found it also has an app so i tried to pentest on it using burpsuite via MITM and intercepting it through burp proxy Though my request got blocked by ...
Dang Max 2.0's user avatar
0 votes
0 answers
143 views

Router level SSL Inspection

Is there any way I could inspect the traffic from an untrusted device connected to my network? I would like to get a router that has ssl inspection capabilities, where I could check the https packets ...
Paul's user avatar
  • 1
1 vote
0 answers
70 views

Triple handshake (TLS) EMS protection against attacks

In TLS we have such an extension as EMS (extended master secret). It has been applied to protect the master secret. But I don't understand how it helps against triple handshake attack. I assume that ...
panda's user avatar
  • 11
1 vote
1 answer
125 views

Is FIDO authN vulnerable to relay attacks?

In this question: Is FIDO2 authentication vulnerable to a social engineering replay attack? it was answered that no, not vulnerable because "the keypair used to by the FIDO device to authenticate ...
Allexj's user avatar
  • 137
40 votes
2 answers
11k views

Did a Huawei modem just try to do a Man-In-The-Middle attack on me?

I have a replica of Huawei B535-333 LTE modem. While I was working from home on my computer I randomly got a security alert saying that certificate for connection with outlook.office365.com was issued ...
gtu's user avatar
  • 503
2 votes
1 answer
197 views

Modern VPNs and average MITM attacks

I am trying to untangle a number of concepts (all of which i am unfamiliar with) in this question, but they all point to a seemingly basic question; With modern tunneling protocols, SSL ciphers and ...
myol's user avatar
  • 165
0 votes
0 answers
122 views

MITM with forwarding between 2 hosts in the same network

I have 3 hosts in the same network, let's say their IP addresses end with: .10 (Host A) .11 (Host B) .12 (Host C) I want to sniff packets between A and C through host B, so that host B acts as MITM. ...
SempriGno's user avatar
0 votes
0 answers
148 views

Man in the Middle Attack for OAuth 2's Authorize endpoint

We all know that the /authorize endpoint is a standard endpoint of OAuth 2. Below is how it's commonly called: GET /oauth2/authorize?client_id={client_id}&redirect_uri={redirect_uri}&...
Joms DV's user avatar
3 votes
2 answers
2k views

Understanding TLS Protections Against DNS Spoofing and Fake Websites

What protections does TLS use in the above scenario? In the picture, the client asks the attacker for the address of Google.com, but the attacker gives them a different ip address which redirects to a ...
F0calPoint's user avatar
0 votes
2 answers
165 views

Website returns different certificate on my home network to mobile hotspot

This is a "should I be worried" question. I access a website on my laptop via my home network/router. My Edge browser gives me a "Your connection isn't private" warning page and ...
Kepboy's user avatar
  • 101
0 votes
0 answers
132 views

Bettercap filtering ARP Spoof

I want to see only monitored device's visited websites not the methods and the redirects how can I filter or can I?
Kafası Güzel Penguen's user avatar
0 votes
0 answers
77 views

Securing an internal tcp proxy

I am developing a TCP-Proxy in C#/.NET using dotNetty (Port of Netty). The proxy is translating messages between two different systems. It will be hosted on a server in the company network, so it is ...
f.lechleitner's user avatar
0 votes
1 answer
424 views

Can China decrypt SSL as soon as people using their ISP?

While these VPNs can work inside of China, I wonder how private and secure they are since China is known for its great firewall, like most technically advanced countries. Are these methods working? ...
Maxfield's user avatar
  • 127
0 votes
1 answer
390 views

What is the difference between a VPN and a Tor Socks proxy on public wifi?

I seek protection against MITM & snooping of VPN or Tor proxy traffic on public WiFi. So, what are the different security impacts of each of these 2 solutions: Using a VPN (like Proton VPN) to ...
John's user avatar
  • 1
0 votes
1 answer
162 views

Evading authenticated diffie hellman with MITM

I understand that in a non-authenticated Diffie-Hellman setup, a man-in-the-middle attack can occur. Now i'm curious about the feasibility of the following scenario: Let's assume a situation where www....
SempriGno's user avatar
0 votes
0 answers
93 views

Could a trusted CA pretend to be me and run a MITM? [duplicate]

Sorry for the basic question, I'm still wrapping my head around the ins and outs of SSL and asymmetric encryption. In order to better test my understanding, I was considering the following thought ...
fruitless fruit juice's user avatar
0 votes
1 answer
223 views

Is Certificate Pinning safe and worthwhile for an API server that will only accept requests from an android application?

I have hosted an api on an AWS Windows server, imported ssl certificates from a known CA, and made https mandatory. Then built a client app that is an executable, then pinned the public key hash for ...
Subham Burnwal's user avatar
1 vote
0 answers
76 views

MS-CHAPv2 Auth protocol downgrade

I'm researching about PPP (Point to Point protocol) and it's security aspects. While exploring PPP Authentication I've noticed possibility for security downgrade attack. Generally authentication ...
Zduniusz's user avatar
0 votes
0 answers
372 views

Every time I log into Facebook, the SMS based 2FA code appears to get intercepted (UK)

Historically, whenever I logged in I got a standard looking text from "Facebook" stating my login code. As of this morning, when I attempt to log in, I get a fake looking text from a random ...
ReflexReaction's user avatar
0 votes
1 answer
227 views

can a VPN provider do DNS poisoning?

I was wondering if we push our DNS over the VPN and basically let them do DNS resolution, is it possible to perform DNS poisoning and man in the middle attack on us? I know browsers check certificates ...
Naadiyaar's user avatar
0 votes
2 answers
194 views

What prevents certificate authorities from issuing fraudulent TLS certificates?

There have been reports of attacks against certificate authorities resulting in the issuance of fraudulent TLS certificates for sites such as google.com, yahoo.com, and skype.com. These attacks seem ...
Gilgamesh's user avatar
0 votes
1 answer
110 views

Suitable method of encryption for user-hosted chat platforms

I am considering how to make my chat application a bit more secure. It has a similar structure to IRC, multiple users can join each server, and servers can be hosted by anyone. I have been using TLS ...
Jachdich's user avatar
  • 103
1 vote
2 answers
660 views

How does the MITM attack work when a client does not check the hostname vs the certificate? [duplicate]

One of the Paho MQTT client SSL options allows checking whether "a certificate matches the given host name.". If I enable this option then I cannot establish a TLS connection to MQTT using ...
user26671's user avatar
2 votes
1 answer
851 views

CSRF: Signed Double Submit Cookie & 'Referer' validation vs MITM and vulnerable subdomains

I have been researching various techniques for preventing CSRF attacks, such as SOP, SameSite, Secure, Referer validation, and CSRF Tokens, and their potential bypasses. During my research, I ...
Advena's user avatar
  • 129
2 votes
4 answers
279 views

Using FIX over TLS, is there a need to sign FIX mesages?

We have 2 servers communicating, server A (a server that I own), and server B (server on the internet that I trust). I get some info from server B, which are FIX messages (https://en.wikipedia.org/...
ethicalhacker's user avatar
1 vote
0 answers
134 views

Malicious Mass Email Attack Occurred, Do I Still Have Problem?

I'm using Apache Airflow and I was troubleshooting built-in smtp setup. A mass email occurred on "[email protected]". It was used as a "From:" email in a mass email attack. ...
python_mainly's user avatar
2 votes
1 answer
121 views

TLS and MiTM Attacks Relevancy over Public Cloud (SDN) internal networks

Edit: To clarify, this question is all about whether we should insist on implementing TLS for internal communications over public cloud tenants as a man-in-the-middle risk reduction control, given the ...
NetworkNewbie's user avatar
0 votes
1 answer
191 views

How to safely share data between 2 SPAs?

Let's say I have 2 SPAs (single page applications), SPA A and SPA B. I want to share data between the 2 applications for an end-to-end flow. How can I safely share data such that it would not be ...
Adam Thompson's user avatar
13 votes
1 answer
4k views

SSL issue captures Facebook app send out traffic

I tried to capture the send-out traffic of the Android app (Google Drive, Facebook, etc.). This is my security thesis. I succeed capture send-out traffic on the Google Drive app with Mitmproxy but ...
ThanhLam112358's user avatar
0 votes
1 answer
108 views

Misuse of trusted certificate authority [duplicate]

Currently I'm working with mitmproxy and intercepting some HTTPs traffic using it. Before I could use it in my browser, I had to trust the certificate via my OS settings. After that, the certificate ...
TrueStar's user avatar
0 votes
2 answers
248 views

Protection against user session attacks (hijack, replay, tampering, CSRF, XSS...)

We develop a website in JAMStack, all URLs are static HTML page, and each interaction with the server are made by a fetch call on our REST API (micro-services). When a user sign in, we want to ...
lakano's user avatar
  • 157
0 votes
0 answers
73 views

Why encrypted internet connections can't be censored or blocked by a country willing to do it? [duplicate]

Is it possible for a country to restrict any encrypted internet connection to some computer outside of the country, or if absolutely necessary just use a mitm(man-in-the-middle) to guarantee they can ...
user289211's user avatar
0 votes
3 answers
243 views

How to make Firefox warn about unknown certificate issuer?

Assume a corporate computer that has intrinsic software installed. It's a mitm setup that replaces the web page's certificate to one signed with a intrinsic software vendor's certificate that is ...
eltomek's user avatar
  • 101
0 votes
1 answer
571 views

Why installing a root certificate on the client opens a door for MitM attack?

Most internet communication is now end-end encrypted using TLS. In the TLS process, the TLS server sends a PKI certificate to the user which then gets authenticated using the CA's root certificate ...
lll's user avatar
  • 3
2 votes
1 answer
264 views

How to decrypt Emotet's TLS traffic by MITMProxy

I have a question about Emotet's TLS traffic: Using MITMProxy, I have successfully decrypted TLS traffic with Emotet's C2 server and can read the contents of the traffic. https://mitmproxy.org ...
mokotan's user avatar
  • 21
4 votes
1 answer
563 views

Some ISP inject malware/ads into my website in the middle of transit

I host my website by my own using droplet/VPS service and node.js server. My wesbite uses SSL Cert/HTTPS from LetsEncrypt, VPS service from DigitalOcean, domain registered from local vendor (RumahWeb) ...
DennyHiu's user avatar
  • 143
1 vote
1 answer
317 views

methods to encrypt data on top of HTTPS (can't do ssl pinning, prevent MITM attacks)

When SSL pinning is not available, for example when using a free TLS certificate from a CDN provider (Cloudflare - does not support HTTP public key pinning, what can be used to encrypt sensitive ...
nbari's user avatar
  • 223
1 vote
0 answers
67 views

Apple Magic Keyboards in Public Spaces Man-in-the-middle

Let's imagine that I leave a Mac with wireless peripherals in a public space like a co-working space that might end up with other wireless devices nearby or physical access (say, at nighttime). My ...
lukewalsh's user avatar

1
2 3 4 5
28